Two PHP Vulnerabilities Threaten Crypto Security, CISA

CISA warns of critical PHP vulnerabilities affecting crypto websites. Users must verify transaction requests to avoid scams. In a recent alert, CISA confirmed that two critical PHP vulnerabilities, named PHP2Shell, are being actively exploited, posing risks to crypto websites. These flaws allow unauthenticated remote code execution, which could lead to malicious actions on affected sites. Users are urged to review their transaction requests carefully to avoid potential scams, as detailed in KuCoin’s blog post . The broader crypto landscape is facing heightened risks due to the revelation of PHP2Shell vulnerabilities, which have a CVSS score of 9.2.